Crls; Jobs; Notifications; Publishing - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

Understanding Subsystem Setup

CRLs

In a CA subsystem, you can set up the CRL feature and any of the three issuing points for
CRLs under the Common Criteria Environment. When setting up the CRL feature, you
cannot set up a CRL that does not have an update frequency specified in the "Update at this
frequency" field. Compliant CRLs must contain the
will not be filled in correctly if an update frequency is not specified. Note that you can
specify an update frequency and also specify that the CRL is updated every time a
certificate is revoked; both settings will be respected. For complete information on CRLs,
see Chapter 15, "Revocation and CRLs."

Jobs

Jobs are events that can be scheduled to be activated periodically. You can set up any of the
available job plug-ins in the Common Criteria Environment. Any custom plug-ins for any
of the Jobs feature are not part of the Common Criteria Environment, however. Although
you will not specifically be instructed to configure Jobs, you can turn on and configure any
jobs that are provided by default. If you want notifications to be sent, be cautious on the
email addresses you provide and make sure they belong to appropriate roles. For complete
information on jobs, see Chapter 14, "Automated Jobs."

Notifications

Automated email notifications are event-driven tasks that send out an email via SMTP
when a specified event occurs. You can set up any of the available Notification plug-ins in
the Common Criteria Environment. Custom plug-ins for the Notification feature are not part
of the Common Criteria Environment, however. Although you will not specifically be
instructed to configure notifications, you can turn on and configure any Notification task
that is provided by default. Be cautious on the email addresses you provide and make sure
they belong to appropriate roles. For complete information on Notifications, see Chapter 13,
"Automated Notifications."

Publishing

You can set up any of the methods of publishing in any of the configurations available in
CS in the Common Criteria Environment. If you set up LDAP publishing, it is highly
recommended that you set it up using SSL client authentication and that you set up the
Directory Server in SSL mode as well. For information about publishing, see Chapter 16,
"Publishing."
704 Red Hat Certificate System Administrator's Guide • September 2005
extension, which
nextUpdateTime